Privacy Policy

The data controller is [LEGAL ENTITY NAME], [LEGAL FORM & REGISTRATION NUMBER], registered at [REGISTERED ADDRESS], [COUNTRY OF INCORPORATION]. For any privacy question or to exercise your rights, contact [DPO OR PRIVACY CONTACT] or email hello@aselios.com.

We collect only what we need to provide and improve the service:

• Account data — name, work email, organisation, and login credentials.
• Billing data — purchase and payment details, processed by our payment processor Stripe (we do not store full card numbers).
• Content you submit — venue information, menus, uploaded documents, competitive research inputs, and briefs used to generate your deliverables.
• Usage and analytics data — how the product is used, device and log information, for security and improvement.
• Support communications — messages you send us and our replies.
• Cookie data — as described in our Cookie Policy.

• To provide the service (contract performance) — running your account, generating and delivering your analyses and creative outputs.
• Legitimate interests — improving and securing the product, preventing abuse, and B2B communications relevant to your use.
• Consent — optional marketing communications and non-essential cookies; you may withdraw consent at any time.
• Legal obligation — accounting, tax, and other records we are required to keep.

Aselios uses artificial-intelligence models to generate analyses and creative deliverables from the information you provide. The content you submit is processed to produce the outputs you request and to deliver the service to you. Regarding model training: [CUSTOMER CONTENT IS / IS NOT USED TO TRAIN MODELS]. Outputs are AI-assisted drafts and should be reviewed by you before use (see our Terms of Service).

We do not sell personal data. We share it only with service providers that help us run the platform, under appropriate contracts: our subprocessors [SUBPROCESSOR LIST]; our hosting provider [HOSTING PROVIDER & LOCATION]; our payment processor Stripe; and any integrations you choose to connect (for example Google Drive), which act on your instruction. We may disclose data where legally required.

Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission Standard Contractual Clauses or an equivalent recognised mechanism.

We retain account and content data for the life of your account and for [RETENTION PERIOD] after deletion, unless a longer period is required by law (for example, invoices kept for statutory accounting periods). You can request deletion at any time.

Subject to applicable law, you have the right to access, rectify, erase, restrict, and port your personal data, to object to certain processing, and to withdraw consent. To exercise any of these, contact [DPO OR PRIVACY CONTACT] or hello@aselios.com. You also have the right to lodge a complaint with your local data-protection supervisory authority.

We apply proportionate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access — including access controls, encryption in transit, and least- privilege practices. No system is perfectly secure, and we continually review our safeguards.

Aselios is a business service and is not directed to, or intended for, anyone under 18. We do not knowingly collect data from children.

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you by email or through the product.